index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("4118d9adce7350c3eedeb056a3335346","9b0e7c460a80f740d455a7521f0eada1","fda3a19afa85912f6dc8452675245d6b","2d02f5499d35a8dffb4c8bc0b7fec5c2","c50b839f2fc3ce5a385b9ae1c05def3a","a452a5f693036320b580d28ee55ae2a3","a6e1efd70a077be032f052bb75544358","802e7d6e80d7a60e17f9ffbd62fcbbeb","5b7ecf7e9d0715f1122baf4ce745c5fcd769dee48150616753fec4d6da16e99e","45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78","56925a1f7d853d814f80e98a1c4890b0a6a84c83a8eded34c585c98b2df6ab19","830207029d83fd46a4a89cd623103ba2321b866428aa04360376e6a390063570","458d258005f39d72ce47c111a7d17e8c52fe5fc7dd98575771640d9009385456","99b0056b7cc2e305d4ccb0ac0a8a270d3fceb21ef6fc2eb13521a930cea8bd9f","3b9fe1713f638f85f20ea56fd09d20a96cd6d288732b04b073248b56cdaef878","87bdb1de1dd6b0b75879d8b8aef80b562ec4fad365d7abbc629bcfc1d386afa6")
